Hi

On Fri, Nov 19, 2021 at 11:16 AM Lev Stipakov <lstipa...@gmail.com> wrote:

> Hi,
>
> Here is what output of openssl.exe built with abovementioned patch on
> my machine:
>
>
> c:\Users\lev\Projects\vcpkg\packages\openssl_x64-windows-ovpn\tools\openssl>openssl.exe
> version -a
> OpenSSL 1.1.1l  24 Aug 2021
> built on: Fri Nov 19 09:43:38 2021 UTC
> platform: VC-WIN64A
> options:  bn(64,64) rc4(16x,int) des(long) idea(int) blowfish(ptr)
> compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090
> /nologo /O2 -utf-8 -FS -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ
> -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
> -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM
> -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM
> -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM
> OPENSSLDIR: "C:\Program Files\OpenVPN\ssl"
> ENGINESDIR:
> "C:\Users\lev\Projects\vcpkg\packages\openssl_x64-windows-ovpn\lib\engines-1_1"
>

That seems to indicate that the prefix is not set properly. See NOTES.WIN
or NOTES.WINDOWS in OpenSSL source tree for default locations chosen in
MSVC build which are safe. I do not have Windows packaging experience, so
I'm not sure why vcpkg folks are using the working directory for setting
these paths and not following OpenSSL installation docs.


> Seeding source: os-specific
>
> ENGINESDIR looks good, no? Is it something we use?
>

I think that's where engine dlls will get loaded from when specified as a
relative path or name. We  allow loading of engines via the "--engine"
option.

Also I guess MODULESDIR in 3.0 build will point to C:\Users\.... which is
not acceptable. Provider names or dlls that the user specifies using our
new "--providers" option will get loaded from there. Also we have to
distribute the dll for the legacy provider which will go into the
MODULESDIR.

Users can override these using env vars but the built-in values should
point to read-only locations.

Selva
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to